Privacy Policy

This policy explains how we handle your personal data when you visit antiqueallureclub.com, buy from us or write to us. In short: we use your data to sell and deliver your pieces and to answer you; we send our newsletter only if you subscribe and confirm; analytics and advertising cookies are used only if you agree; we do not sell your personal information.

1. Who is responsible

The controller of your personal data is Dmytro Tabachnyi – GWS (Antique Allure), Kobierzycka 10, 52-315 Wrocław, Poland, NIP 7011179414, REGON 527190930. For anything about your data, email info@antiqueallureclub.com.

2. What we use your data for

Purpose	Data	Legal basis (GDPR)	How long we keep it
Your order: payment, delivery, customs, order emails	Name, email, phone, billing and delivery address, order details, payment confirmation	Contract, Art. 6(1)(b)	For the order and returns period, then as in the next rows
Invoices, accounting and tax	Order and billing data	Legal obligation, Art. 6(1)(c)	5 years from the end of the year in which the related tax became due, as Polish tax law requires
Returns and complaints	Order details, your messages and photos	Contract and legal obligation, Art. 6(1)(b)–(c)	Until possible claims expire under Polish law, generally up to 6 years from delivery
Answering your messages (contact, return and question forms, email, phone)	Name, email, order number, your message	Steps you ask for before or under a contract, Art. 6(1)(b); otherwise our legitimate interest in answering you, Art. 6(1)(f)	3 years after our last exchange, so we can pick up the thread if you come back
Your account (optional)	Email, password (stored only as a secure hash), addresses, order history, wishlist	Contract, Art. 6(1)(b)	Until you delete your account or it stays unused for 36 months (we email you 30 days before deleting it); order records as above
Security and spam protection	IP address (for form limits we keep only a one-way hash, for one hour), device and browser data	Legitimate interest in a secure shop, Art. 6(1)(f)	As short as possible; see the cookie table
Payment fraud prevention	Payment and device data processed by our payment providers	Legitimate interest and legal obligations of payment providers	Set by the providers
Review invitations	Name, email, order reference shared with Trustpilot	Legitimate interest, Art. 6(1)(f); you can object at any time	We share your name, email and order reference with Trustpilot up to 14 days after delivery; Trustpilot keeps the invitation under its own policy
Newsletter: new arrivals and price drops	Email address, date and IP hash of your consent	Consent, Art. 6(1)(a); double opt-in	Until you unsubscribe (every email has a link) or 24 months after your last confirmation if we have not emailed you
Analytics	How you use the site (Microsoft Clarity, Google Analytics)	Consent, Art. 6(1)(a)	See the cookie table
Advertising measurement and order attribution	Ad clicks and conversions (Google Ads), source of your visit (WooCommerce)	Consent, Art. 6(1)(a)	See the cookie table
Your cookie choice	The aac_consent cookie	Legal obligation to record consent, Art. 6(1)(c)	180 days

You don’t have to give us your data, but without your name, address and email we cannot complete an order, and without an email address we cannot reply to you. Our payment providers may run automated fraud checks on payments; we do not otherwise make decisions about you by automated means alone.

3. Who receives your data

We do not sell, trade or rent your personal information. We share it only with those who help us run the shop, and only as far as they need it:

• Payments: Stripe, PayPal (including Apple Pay, Google Pay, BLIK and Przelewy24 payments made through PayPal) and WooPayments by Automattic, including the pay-later options (Klarna, Afterpay, Affirm) offered through WooPayments. Card details go directly to them; we never see or store them.
• Delivery: carriers and customs authorities in transit and destination countries, including outside the EEA, receive the delivery and customs data needed to deliver your order.
• Website and email: our hosting provider (servers in Germany, EU) and our email provider, zenbox.pl.
• Analytics and advertising (only with your consent): Microsoft (Clarity) and Google (Google Analytics, Google Ads).
• Spam and fraud protection: Google (reCAPTCHA) on our forms; at checkout, our payment providers also run hCaptcha and Cloudflare bot checks.
• Reviews: Trustpilot, for review invitations after a purchase.
• Newsletter: emails are sent from our own site; no external newsletter service is used.
• Authorities: when the law requires it, for example tax or customs authorities, or to establish or defend legal claims.

4. Transfers outside the EEA

We are based in Poland, in the European Union. Some providers, such as Stripe, PayPal, Google and Microsoft, also process data in the United States. These transfers rely on the EU–US Data Privacy Framework (an adequacy decision of the European Commission) or on the Commission’s standard contractual clauses. When you order delivery to a country outside the EEA, we pass your delivery data to carriers and customs there because this is necessary to deliver your order.

5. Cookies

Cookie settings

How consent works. When you first visit, a banner lets you Accept all, Reject all, or open Settings, choose by category (Analytics, Marketing) and Save choices. Strictly necessary cookies are always on: the shop cannot work without them. Your choice is stored in a cookie named aac_consent for 180 days; after that we ask again. You can change or withdraw your choice at any time via Cookie settings in the footer; withdrawal also removes the analytics cookies we set.

Strictly necessary (always on). Your bag and session (WooCommerce); your currency choice, once you pick USD or EUR; your wishlist, once you save a piece; payments and fraud prevention by Stripe and PayPal on product, bag and checkout pages; spam protection for forms (Google reCAPTCHA); and your cookie choice.

Analytics (only with your consent). Microsoft Clarity shows us how visitors use the site (clicks, scrolling, anonymized session recordings) so we can improve it. In the EEA, Clarity runs without its tracking cookies. Google Analytics counts visits, pages viewed and purchases, so we can see which pages and pieces interest our visitors; it does not store IP addresses, and we keep this data for 14 months. Until you accept Analytics, Google Analytics sets no cookies, and Google receives only cookieless, aggregated signals without identifiers. If you withdraw consent, we tell Clarity to stop and delete the Clarity and Google Analytics cookies.

Marketing (only with your consent). Google Ads measures which of our ads lead to visits and purchases and may be used by Google to show you our ads elsewhere. Until you consent, Google receives only cookieless, aggregated signals without identifiers; advertising cookies such as _gcl_au are set only after you accept Marketing, and Google’s ads data redaction is on for visitors who decline. With Marketing consent, WooCommerce order attribution cookies (sbjs_*) record which search or link brought you to us.

Services that set no cookies on our pages. Trustpilot review invitations (see section 3).

Cookie	Set by	Purpose	Expires	Category
aac_consent	antiqueallureclub.com	Stores your cookie choice	180 days	Necessary
wp_woocommerce_session_*	antiqueallureclub.com	Keeps your bag and session	2 days	Necessary
woocommerce_cart_hash, woocommerce_items_in_cart	antiqueallureclub.com	Updates bag contents	Session	Necessary
__stripe_mid	Stripe	Fraud prevention for card payments	1 year	Necessary
__stripe_sid	Stripe	Fraud prevention for card payments	30 minutes	Necessary
m	m.stripe.com	Fraud prevention for card payments	2 years	Necessary
__cf_bm	Stripe / PayPal / hCaptcha (Cloudflare)	Bot protection on payment services	30 minutes	Necessary
hmt_id	hCaptcha	Anti-fraud check used by Stripe	1 year	Necessary
_GRECAPTCHA	Google reCAPTCHA	Spam protection for forms	6 months	Necessary
NID	Google	Set by reCAPTCHA when it loads	6 months	Necessary
_clck	Microsoft Clarity	Distinguishes your browser for analytics (not set in the EEA)	1 year	Analytics
_clsk	Microsoft Clarity	Links actions within one visit (not set in the EEA)	1 day	Analytics
_ga	Google Analytics	Distinguishes your browser for analytics	2 years	Analytics
_ga_0N7TS00MNT	Google Analytics	Keeps the state of your visit for analytics	2 years	Analytics
_gcl_au	Google Ads	Ad conversion measurement	90 days	Marketing
sbjs_*	antiqueallureclub.com	Where your visit came from (order attribution)	6 months / session	Marketing

Durations are set by the providers and may change. Wishlist and currency cookies are set only after you use those features. You can also block or delete cookies in your browser; blocking necessary cookies may break the bag and checkout.

6. Your rights

Wherever you live, you can ask us to:

• see the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data, unless we must keep it, for example for tax records;
• restrict how we use it while a question is being resolved;
• receive the data you gave us in a portable format;
• object to uses based on our legitimate interest, and at any time to any marketing;
• withdraw consent at any time (for cookies: Cookie settings in the footer; for the newsletter: the unsubscribe link in every email), without affecting what we did before.

Email info@antiqueallureclub.com. We reply within one month. You also have the right to complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or the authority in the EU country where you live or work.

7. Security

Our site uses an encrypted connection (HTTPS). Card details go straight to our payment providers and never reach us. Access to customer data is limited to the people who need it to run the shop. No method of sending data over the internet is completely secure, so if you notice anything unusual about your account or order, please tell us.

8. Children

Our shop is not intended for anyone under 16, and we do not knowingly collect data from children. If we learn that we have, we delete it.

9. Changes

We may update this policy when our services or the law change. The date at the top shows the latest version; for important changes, we also show a notice on the site.

10. Contact and complaints

Dmytro Tabachnyi – GWS (Antique Allure)
Kobierzycka 10, 52-315 Wrocław, Poland
NIP 7011179414, REGON 527190930
info@antiqueallureclub.com · +48 733 228 254

Our returns policy is on the Returns page; our terms of sale are in the Terms & Conditions.